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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 



application: 
Listing of Claims: 

1 1. (currently amended) A sy s tem An apparatus for securely 

2 authenticating a data exchange session with an implantable medical device, 

3 comprising: 

4 a secure key repository configured to maintain a crypto key uniquely 

5 associated with an implantable medical device to authenticate data during a data 

6 exchange session; and 

7 an external device configured to establish a secure connection through a 



8 short range interface with the secure key repository, to authenticate authorization 

9 to access data on the implantable medical device by securely retrieving the crypto 

10 key from the secure key repository, and to transact the data exchange session 

11 using the crypto key to authenticate the data by transitioning to a long range 

12 interface. 



1 Claim 2 (cancelled). 

1 3. (currently amended) A system An apparatus according to Claim 1, 

2 further comprising: 

3 an authentication component configured to employ the crypto key during 

4 the data exchange session, comprising at least one of: 

5 a command authenticator configured to authenticate commands 

6 exchanged through the external device with the implantable medical device and; 

7 a data integrity checker configured to check the integrity of the 

8 data received by and transmitted from the external device; and 

9 a data encrypter configured to encrypt the data received by and 
10 transmitted from the external device. 
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1 4. (currently amended) A system An apparatus according to Claim 1, 

2 further comprising: 

3 a short range interface logically defining a secured area around the 

4 implantable medical device in which to establish the secure connection; and 

5 a long range interface logically defining a non-secured area extending 

6 beyond the secured area in which to transact the data exchange session. 

1 5. (currently amended) A system An apparatus according to Claim 1, 

2 further comprising: 

3 a key generator configured to statically generate the crypto key, and to 

4 persistently store the crypto key in the secure key repository. 

1 6. (currently amended) A system An apparatus according to Claim 5, 

2 wherein the crypto key is stored on at least one of the implantable medical device, 

3 a patient designator, a secure database, a physical token, and a repeater. 

1 7. (currently amended) A system An apparatus according to Claim 5, 

2 wherein the crypto key is securely retrieved from the secure key repository 

3 through a programmer. 

1 8. (currently amended) A system An apparatus according to Claim 1, 

2 further comprising: 

3 a key generator configured to dynamically generate the crypto key. 

1 9. (currently amended) A system An apparatus according to Claim 8, 

2 wherein the crypto key is stored on at least one of the implantable medical device, 

3 a patient designator, and a repeater. 

1 10. (currently amended) A system An apparatus according to Claim 8, 

2 wherein the crypto key is securely retrieved from the secure key repository 

3 through at least one of a programmer and a repeater. 
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1 11. (currently amended) A system An apparatus according to Claim 1, 

2 wherein the crypto key is maintained on the implantable medical device, further 

3 comprising: 

4 a short range telemetry interface retrieving the crypto key through short 

5 range telemetry. 

1 12. (currently amended) A system An apparatus according to Claim 

2 11, wherein the short range telemetry comprises inductive telemetry. 

1 13. (currently amended) A syst e m An apparatus according to Claim 

2 11, wherein the external device comprises a programmer. 

1 14. (currently amended) A sy s t e m An apparatus according to Claim 

2 13, wherein the crypto key is provided from the programmer to a repeater. 

1 15. (currently amended) A s ystem An apparatus according to Claim 

2 11, wherein the external device comprises a patient designator. 

1 16. (currently amended) A sy s tem An apparatus according to Claim 

2 15, wherein the crypto key is provided from the patient designator to at least one 

3 of a programmer and a repeater. 

1 17. (currently amended) A system An apparatus according to Claim 1, 

2 further comprising: 

3 a secure database configured to maintain the crypto key; and 

4 a secure server providing configured to provide the crypto key through a 

5 secure connection. 

1 18. (currently amended) A system An apparatus according to Claim 

2 17, wherein the secure connection comprises at least one of a serial or hardwired 

3 connection and a secure network connection. 

1 19. (currently amended) A system An apparatus according to Claim 

2 17, wherein the external device comprises a programmer. 
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1 20. (currently amended) A syst e m An apparatus according to Claim 

2 19, wherein the crypto key is provided from the programmer to a repeater. 

1 21. (currently amended) A system An apparatus according to Claim 1 , 

2 further comprising: 

3 a physical token configured to maintain the crypto key; and 

4 a reader configured to retrieve the crypto key by accessing the physical 

5 token. 

1 22. (currently amended) A syst e m An apparatus according to Claim 

2 21, further compri sing : 

3 a physical label configured to specify the crypto key on the physical token. 

1 23 . (currently amended) A syst e m An apparatus according to Claim 

2 22, wherein the physical label comprises at least one of alphanumeric text, bar 

3 coding, and an outwardly-appearing indication. 

1 24. (currently amended) A syst e m An apparatus according to Claim 

2 21, further comprising: 

3 internal storage configured to specify the crypto key on the physical token. 

1 25. (currently amended) A system An apparatus according to Claim 

2 24, wherein the internal storage comprises at least one of a transistor, a memory 

3 circuit, an electronically readable storage medium, and a magnetically readable 

4 storage medium. 

1 26. (currently amended) A syst e m An apparatus according to Claim 

2 21, wherein the physical token is accessed using magnetic, optical, serial, and 

3 physical reading. 

1 27. (currently amended) A syst e m An apparatus according to Claim 1, 

2 wherein the crypto key comprises at least one of a 128-bit crypto key and a 

3 symmetric crypto key. 
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1 28. (currently amended) A syst e m An apparatus according to Claim 1 , 

2 wherein the crypto key comprises at least one of a statically generated and 

3 persistently stored crypto key, dynamically generated and persistently stored 

4 crypto key, a dynamically generated and non-persistently stored session crypto 

5 key. 

1 29. (currently amended) A syst e m An apparatus according to Claim 1 , 

2 wherein the implantable medical device comprises at least one of an implantable 

3 cardiac device, neural stimulation device, and drug therapy dispensing device. 

1 30. (previously presented) A method for securely authenticating a data 

2 exchange session with an implantable medical device, comprising: 

3 maintaining a crypto key uniquely associated with an implantable medical 

4 device in a secure key repository to authenticate data during a data exchange 

5 session; 

6 establishing a secure connection through a short range interface from an 

7 external source with the secure key repository; 

8 authenticating authorization to access data on the implantable medical 

9 device by securely retrieving the crypto key from the secure key repository; and 

1 0 transacting the data exchange session using the crypto key to authenticate 

1 1 the data by transitioning to a long range interface. 

1 Claim 31 (cancelled). 

1 32. (previously presented) A method according to Claim 30, further 

2 comprising: 

3 employing the crypto key during the data exchange session, comprising at 

4 least one of: 

5 authenticating commands exchanged through the external source 

6 with the implantable medical device and; 

7 checking the integrity of the data received by and transmitted from 

8 the external source; and 
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9 encrypting the data received by and transmitted from the external 

10 source. 

1 33. (original) A method according to Claim 30, further comprising: 

2 logically defining a secured area around the implantable medical device in 

3 which to establish the secure connection; and 

4 logically defining a non-secured area extending beyond the secured area in 

5 which to transact the data exchange session. 

1 34. (original) A method according to Claim 30, further comprising: 

2 statically generating the crypto key; and 

3 persistently storing the crypto key in the secure key repository. 

1 35. (original) A method according to Claim 34, wherein the crypto key 

2 is stored on at least one of the implantable medical device, a patient designator, a 

3 secure database, a physical token, and a repeater. 

1 36. (original) A method according to Claim 35, further comprising: 

2 securely retrieving the crypto key from the secure key repository through a 

3 programmer. 

1 37. (original) A method according to Claim 30, further comprising: 

2 dynamically generating the crypto key. 

1 38. (original) A method according to Claim 37, wherein the crypto key 

2 is stored on at least one of the implantable medical device, a patient designator, 

3 and a repeater. 

1 39. (original) A method according to Claim 37, further comprising: 

2 securely retrieving the crypto key from the secure key repository through 

3 at least one of a programmer and a repeater. 

1 40. (original) A method according to Claim 30, further comprising: 

2 maintaining the crypto key on the implantable medical device; and 

3 retrieving the crypto key through short range telemetry. 



-7- 



Response to Final Office Action 
Docket No. 020.0328.US.UTL 



1 41. (original) A method according to Claim 40, wherein the short 

2 range telemetry comprises inductive telemetry. 

1 42. (original) A method according to Claim 40, wherein the external 

2 source comprises a programmer. 

1 43. (original) A method according to Claim 42, further comprising: 

2 providing the crypto key from the programmer to a repeater. 

1 44. (original) A method according to Claim 40, wherein the external 

2 source comprises a patient designator. 

1 45. (original) A method according to Claim 44, further comprising: 

2 providing the crypto key from the patient designator to at least one of a 

3 programmer and a repeater. 

1 46. (original) A method according to Claim 30, further comprising: 

2 maintaining the crypto key in a secure database; and 

3 retrieving the crypto key through a secure connection. 

1 47. (original) A method according to Claim 46, wherein the secure 

2 connection comprises at least one of a serial or hardwired connection and a secure 

3 network connection. 

1 48. (original) A method according to Claim 46, wherein the external 

2 source comprises a programmer. 

1 49. (original) A method according to Claim 48, further comprising: 

2 providing the crypto key from the programmer to a repeater. 

1 50. (original) A method according to Claim 30, further comprising: 

2 maintaining the crypto key on a physical token; and 

3 retrieving the crypto key by accessing the physical token. 

1 51. (original) A method according to Claim 50, further comprising: 
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2 specifying the crypto key on the physical token using a physical label. 

1 52. (original) A method according to Claim 5 1 , wherein the physical 

2 label comprises at least one of alphanumeric text, bar coding, and an outwardly- 

3 appearing indication. 

1 53. (original) A method according to Claim 50, further comprising: 

2 specifying the crypto key on the physical token using internal storage. 

1 54. (original) A method according to Claim 53, wherein the internal 

2 storage comprises at least one of a transistor, a memory circuit, an electronically 

3 readable storage medium, and a magnetically readable storage medium. 

1 55. (original) A method according to Claim 50, further comprising: 

2 accessing the physical token using magnetic, optical, serial, and physical 

3 reading. 

1 56. (original) A method according to Claim 30, wherein the crypto key 

2 comprises at least one of a 128-bit crypto key and a symmetric crypto key. 

1 57. (original) A method according to Claim 30, wherein the crypto key 

2 comprises at least one of a statically generated and persistently stored crypto key, 

3 dynamically generated and persistently stored crypto key, a dynamically 

4 generated and non-persistently stored session crypto key. 

1 58. (previously presented) A method according to Claim 30, wherein 

2 the implantable medical device comprises at least one of an implantable cardiac 

3 device, neural stimulation device, and drug therapy dispensing device. 

1 59. (previously presented) An apparatus for securely authenticating a 

2 data exchange session with an implantable medical device, comprising: 

3 means for maintaining a crypto key uniquely associated with an 

4 implantable medical device in a secure key repository to authenticate data during 

5 a data exchange session; 
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6 means for establishing a secure connection through a short range interface 

7 from an external device with the secure key repository; 

8 means for authenticating authorization to access data on the implantable 

9 medical device by means for securely retrieving the crypto key from the secure 

10 key repository; and 

1 1 means for transacting the data exchange session using the crypto key to 

1 2 authenticate the data by transitioning to a long range interface. 

1 60. (currently amended) A syst e m An apparatus for securely 

2 transacting a data exchange session with an implantable medical device, 

3 comprising: 

4 a short range interface device configured to communicat e provide 

5 communication with an implantable medical device by authenticating access to a 

6 securely maintained crypto key using a short range interface; and 

7 an external device configured to commence a data exchange session with 

8 the implantable medical device by transitioning to via a long range interface upon 

9 successful access authentication, and to transact the data exchange session using 
1 0 the crypto key. 

1 61. (currently amended) A syst e m An apparatus according to Claim 

2 60, wherein the implantable medical device maintains patient health information 

3 in maintain e d in an encrypted form. 

1 62. (currently amended) A syst e m An apparatus according to Claim 

3 authentication occurs through short range telemetry, further comprising: 

4 a short range telemetric connection with the implantable medical device; 

5 a short range telemetric device configured to request the crypto key from 

6 the implantable medical device, and to receive the crypto key from the 

7 implantable medical device. 
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1 63. (currently amended) A syst e m An apparatus according to Claim 

3 authentication occurs through a patient designator, further comprising: 

4 a short range telemetric connection with the implantable medical device; 

5 and 

6 [[a]] the patient designator configured to request the crypto key from the 

7 implantable medical device, and to receive the crypto key from the implantable 

8 medical device. 

1 64. (currently amended) A syst e m An apparatus according to Claim 

2 60, wherein the auth e nticating with th e implantabl e m e dical d e vic e is access 

3 authentication occurs by using a physical token, further comprising: 

4 [[a]] the physical token; and 

5 a reader configured to receive the crypto key from the physical token. 

1 65. (currently amended) A syst e m An apparatus according to Claim 

2 60, wherein the implantable medical device maintains patient health information 

3 is maintain e d in th e implantable medical d e vic e in an unencrypted form and is 

4 accessible in the unencrypted form exclusively through a short range telemetric 

5 connection. 

1 66. (currently amended) A syst e m An apparatus according to Claim 

2 65, wherein the authenticating with the implantable medical device is through 

3 short range telemetry, further comprising: 

4 a short range telemetric connection with the implantable medical device; 

5 an external source configured to send a session crypto key to the 

6 implantable medical device; and 

7 an encrypter configured to encrypt the patient health information 

8 maintained in the implantable medical device. 
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1 67. (currently amended) A syst e m An apparatus according to Claim 

2 60, wherein the authenticating with the implantable medical devic e is access 

3 authentication occurs through a patient designator, further comprising: 

4 [[a]] the patient designator configured to establish a short range telemetric 

5 connection with the implantable medical device, and to send a session crypto key 

6 to the implantable medical device; and 

7 an encrypter configured to encrypt [[the]] patient health information 

8 maintained in the implantable medical device. 

1 68. (currently amended) A syst e m An apparatus according to Claim 

2 60, wherein the long range interface is augmented using one or more repeaters. 

1 69. (currently amended) A method for securely transacting a data 

2 exchange session with an implantable medical device, comprising: 

3 maintaining a short range interface device, comprising: 

4 communicating providing communication with an implantable 

5 medical device; and 

6 authenticating access to a securely maintained crypto key using a 

7 short range interface; and 

8 maintaining an external device, comprising: 

9 commencing a data exchange session with the implantable medical 

1 0 device by transitioning to via a long range interface upon successful access 

1 1 authentication; and 

1 2 transacting the data exchange session using the crypto key. 

1 70. (currently amended) A method according to Claim 69, wherein the 

2 implantable medical device maintains patient health information in maintain e d in 

3 an encrypted form. 

1 71 . (currently amended) A method according to Claim 69, wherein the 

2 authenticating with the implantabl e m e dical d e vic e is access authentication occurs 

3 through short range telemetry, further comprising: 



- 12- 



Response to Final Office Action 
Docket No. 020.0328.US.UTL 

4 establishing a short range telemetric connection with the implantable 

5 medical device; 

6 requesting the crypto key from the implantable medical device; and 

7 receiving the crypto key from the implantable medical device. 

1 72. (currently amended) A method according to Claim 69, wherein the 

2 auth e nticating with th e implantabl e m e dical d e vic e is access authentication occurs 

3 through a patient designator, further comprising: 

4 establishing a short range telemetric connection between the implantable 

5 medical device and the patient designator; 

6 requesting [[for]] the crypto key from the implantable medical device; and 

7 receiving the crypto key from the implantable medical device. 

1 73. (currently amended) A method according to Claim 69, wherein the 

2 authenticating with th e implantabl e medical device is access authentication occurs 

3 by using a physical token, further comprising: 

4 accessing the physical token; and 

5 receiving the crypto key from the physical token. 

1 74. (currently amended) A method according to Claim 69, wherein the 

2 implantable medical device maintains patient health information is maintained in 

3 th e implantabl e m e dical d e vice in unencrypted form and is accessible in the 

4 unencrypted form exclusively through a short range telemetric connection. 

1 75. (currently amended) A method according to Claim 74, wherein the 

2 auth e nticating with th e implantabl e m e dical d e vice is access authentication occurs 

3 through short range telemetry, further comprising: 

4 establishing a short range telemetric connection with the implantable 

5 medical device; 

6 sending a session crypto key to the implantable medical device; and 

7 encrypting the patient health information maintained in the implantable 

8 medical device. 
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1 76. (currently amended) A method according to Claim 69, wherein the 

2 nnthnntir.nt.ing with th o implantable m e dical devic e is access authentication occurs 

3 through a patient designator, further comprising: 

4 establishing a short range telemetric connection with the implantable 

5 medical device through the patient designator; 

6 sending a session crypto key to the implantable medical device; and 

7 encrypting the patient health information maintained in the implantable 

8 medical device. 

1 77. (original) A method according to Claim 69, wherein the long range 

2 interface is augmented using one or more repeaters. 

1 78. (currently amended) An apparatus for securely transacting a data 

2 exchange session with an implantable medical device, comprising: 

3 means for maintaining a short range interface device, comprising: 

4 means for communicating providing communication with an 

5 implantable medical device; and 

6 means for authenticating access to a securely maintained crypto 

7 key using a short range interface; and 

8 means for maintaining an external device, comprising: 

9 means for commencing a data exchange session with the 

1 0 implantable medical device by means for transitioning to via a long range 

1 1 interface upon successful access authentication; and 

1 2 means for transacting the data exchange session by accessing 

1 3 patient health information stored on the implantable medical device using the 

1 4 crypto key. 

1 79. (currently amended) A s yst e m An apparatus for securely 

2 transacting a data exchange session with an implantable medical device through 

3 secure lookup, comprising: 
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4 a secure server configured to provide identification of and authentication 

5 to access an implantable medical device by authenticating access to a securely 

6 maintained crypto key; and 

7 a secure external device configured to request the crypto key from the 



8 secure server via a secure short range connection based on the identification of 

9 and authentication to access the implantable medical device, to receive the crypto 

1 0 key, to commence a data exchange session with the implantable medical device 

1 1 by transitioning to a long range interface upon successful access authentication 

1 2 with th e implantable medical d e vic e, and to transact the data exchange session 

1 3 using the crypto key. 



1 80. (currently amended) A method for securely transacting a data 

2 exchange session with an implantable medical device through secure lookup, 

3 comprising: 

4 providing identification of and authentication to access an implantable 

5 medical device by authenticating access to a securely maintained crypto key 

6 stored on a secure server; 

7 requesting the crypto key from the secure server via a secure short range 

8 connection based on the identification of and authentication to access the 

9 implantable medical device; and 

1 0 receiving the crypto key; 

1 1 commencing a data exchange session with the implantable medical device 

1 2 by transitioning to a long range interface upon successful access authentication 

1 3 with th e implantabl e m e dical d e vic e; and 

14 transacting the data exchange session using the crypto key. 

1 81. (currently amended) An apparatus for securely transacting a data 

2 exchange session with an implantable medical device through secure lookup, 

3 comprising: 

4 means for providing identification of and authentication to access an 

5 implantable medical device by means for authenticating access to a securely 

6 maintained crypto key stored on a secure server; 
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7 means for requesting the crypto key from the secure server via a secure 

8 short range connection based on the identification of and authentication to access 

9 the implantable medical device; and 

1 0 means for receiving the crypto key; 

1 1 means for commencing a data exchange session with the implantable 

1 2 medical device by means for transitioning to a long range interface upon 

1 3 successful access authentication with th e implantabl e m e dical d e vic e; and 

1 4 means for transacting the data exchange session using the crypto key. 



- 16- 



